Curated security research, vulnerabilities, advisories and tools for practitioners.

research coverage

Curated research security coverage. (Page 18)

511.

Hunting evasive vulnerabilities

research | 2025-02-07 10:51 | portswigger.net | Original ↗ | .md | #web-security | #security-research | #methodology

512.

DeepSeek Security, Privacy, and Governance: Hidden Risks in Open-Source AI

research | 2025-02-06 15:00 | theori.io | Original ↗ | .md | #ai-security | #supply-chain | #privacy

513.

Top 10 web hacking techniques of 2024

research | 2025-02-04 15:20 | portswigger.net | Original ↗ | .md | #web-security | #community | #research

514.

Netlas vs Censys: Platforms Comparison

research | 2025-02-03 00:00 | netlas.io | Original ↗ | .md | #attack-surface | #netlas | #tool-comparison

515.

Bypassing character blocklists with unicode overflows

research | 2025-01-29 08:10 | portswigger.net | Original ↗ | .md | #burp-suite | #web-security | #unicode

516.

How to use Time Travel Analysis to reverse engineer a malware

research | 2025-01-31 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #reverse-engineering | #software-security

517.

Xbox 360 security in details: the long way to RGH3

research | 2025-01-23 09:34 | swarm.ptsecurity.com | Original ↗ | .md | #embedded-security | #xbox-360 | #rgh3

518.

Contas de Serviço Gerenciadas por Grupo: solução contra Kerberoasting ou incentivo ao ataque Golden GMSA?

research | 2025-01-24 16:32 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #insights

519.

Group Managed Service Accounts: A Solution Against Kerberoasting or an Incentive for Golden GMSA Attacks?

research | 2025-01-24 12:00 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #insights

520.

Top 10 web hacking techniques of 2024: nominations open

research | 2025-01-22 08:54 | portswigger.net | Original ↗ | .md | #web-security | #community | #research

521.

Security audit of the Notary Project

research | 2025-01-20 23:00 | blog.quarkslab.com | Original ↗ | .md | #supply-chain | #audit | #ostif

522.

Introducing Lightspark's Public Bug Bounty Program

research | 2025-01-15 17:57 | hackerone.com | Original ↗ | .md | #bug-bounty | #responsible-disclosure | #hackerone

523.

Netlas vs Fofa: Platforms Comparison

research | 2024-12-18 00:00 | netlas.io | Original ↗ | .md | #netlas | #tool-comparison | #iot-search

524.

Windows Tooling Updates: OleView.NET

research | 2024-12-12 00:00 | projectzero.google | Original ↗ | .md | #rce | #windows | #tooling

525.

New dog, old tricks: DaMAgeCard attack targets memory directly thru SD card reader

research | 2024-12-05 16:41 | swarm.ptsecurity.com | Original ↗ | .md | #hardware-security | #sd-express | #dma-attack

526.

Sonicwall Firmware Deep Dive - SWI Firmware Decryption

research | 2024-12-02 00:00 | bishopfox.com | Original ↗ | .md | #reverse-engineering | #firmware | #security-research

527.

O lado obscuro do JWT: Explorando vulnerabilidades em Tokens.

research | 2024-11-29 15:23 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #jwt | #research

528.

The Dark Side of JWT: Exploiting Token Vulnerabilities

research | 2024-11-29 15:21 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #jwt | #research

529.

Why Retail and E-commerce Organizations Trust Security Researchers During the Holiday Shopping Season

research | 2024-11-27 18:14 | hackerone.com | Original ↗ | .md | #bug-bounty | #retail | #e-commerce

530.

New crazy payloads in the URL Validation Bypass Cheat Sheet

research | 2024-11-22 09:06 | portswigger.net | Original ↗ | .md | #burp-suite | #ssrf | #cheat-sheet

531.

Economize dinheiro escovando os dentes - desvendando a Modelagem de Ameaças - parte 1 de 3.

research | 2024-11-22 17:14 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #insights

532.

Save money brushing your teeth - unveiling the Threat Modeling - part 1 of 3

research | 2024-11-22 17:14 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #insights

533.

AI deep dive: LLM jailbreaking

research | 2024-11-19 13:00 | bugcrowd.com | Original ↗ | .md | #ai-security | #prompt-injection | #jailbreak

534.

Listen to the whispers: web timing attacks that actually work

research | 2024-11-18 08:32 | portswigger.net | Original ↗ | .md | #black-hat | #research | #tooling

535.

How REI Strengthens Security with HackerOne’s Global Security Researcher Community

research | 2024-11-19 00:41 | hackerone.com | Original ↗ | .md | #bug-bounty | #vulnerability-disclosure | #interview

536.

New tool for finding mutated XSS, $20k Chromium sandbox escape, Live bug bounty results from Ekoparty – ethical hacker news roundup

research | 2024-11-18 14:02 | yeswehack.com | Original ↗ | .md | #bug-bounty | #php | #sandbox-escape

537.

Netlas vs Shodan: Platforms Comparison

research | 2024-11-19 00:00 | netlas.io | Original ↗ | .md | #attack-surface | #shodan | #netlas

538.

CREST Certified Company

research | 2024-11-17 02:13 | projectblack.io | Original ↗ | .md | #penetration-testing | #announcement | #australia

539.

BrazenBamboo Weaponizes FortiClient Vulnerability to Steal VPN Credentials via DEEPDATA

research | 2024-11-15 14:50 | volexity.com | Original ↗ | .md | #zero-day | #vulnerability-research | #threat-intelligence

540.

Time Boxed Penetration Testing for Web Applications

research | 2024-11-12 04:33 | projectblack.io | Original ↗ | .md | #penetration-testing | #methodology | #scoping

← Previous More →